c4f94deb3fd713e322e49f90dc225791a9a87441c91d1f3764c6f3d962ce5033

Sharing

Copy URL Twitter E-mail

General

Target

c4f94deb3fd713e322e49f90dc225791a9a87441c91d1f3764c6f3d962ce5033
Size

3.1MB
MD5

767eca569e16521c59be7b8edfb6ad8b
SHA1

c7866bcd954e362abed49ade1ce9a6af05105cb5
SHA256

c4f94deb3fd713e322e49f90dc225791a9a87441c91d1f3764c6f3d962ce5033
SHA512

8ce660a60d7d512082aa5491be06e82800f527f1fbed9080356a37be94c384d3612300b93645d884e6dfaa3f6a9303365e8901bb11a2165be007d8a51d625292
SSDEEP

98304:WcZcp5wCBPC9ypppbNDqg7+ZXx5zjmJB20PxHqAIg/:Wv31ppbNDqg7+1x5zjmJB20JHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4f94deb3fd713e322e49f90dc225791a9a87441c91d1f3764c6f3d962ce5033

Files

c4f94deb3fd713e322e49f90dc225791a9a87441c91d1f3764c6f3d962ce5033
.exe windows:6 windows x64 arch:x64

f06ed7d3e615dacbff453fa34c6601e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Coding\nvidia oc scan\GT3\nv_scanner-mod\nv_scanner_03\x64\Release\nv_scanner.pdb

Imports

kernel32

FindActCtxSectionStringW
QueryActCtxW
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetCurrentProcessId
GlobalGetAtomNameW
SetEvent
SetThreadPriority
ResumeThread
GlobalAddAtomW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
lstrcmpiW
GetProcessHeap
lstrcmpW
FreeResource
GlobalDeleteAtom
GlobalFindAtomW
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetUserDefaultUILanguage
VirtualProtect
GetCurrentDirectoryW
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
GetTempPathW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetThreadTimes
FreeLibraryAndExitThread
VirtualAlloc
ActivateActCtx
RtlPcToFileHeader
ExitProcess
ExitThread
HeapQueryInformation
GetCommandLineA
GetCommandLineW
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
GetACP
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
OutputDebugStringA
CopyFileW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetCurrentThread
SwitchToThread
GetCurrentProcess
DuplicateHandle
FormatMessageW
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
GetLastError
GetFullPathNameW
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryExW
FileTimeToSystemTime
LocalFree
lstrcmpA
SetLastError
CreateFileW
GetFileAttributesW
GetSystemDirectoryW
LocalAlloc
Sleep
FreeLibrary
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeactivateActCtx
CreateActCtxW
LoadLibraryW
RtlUnwindEx
GetModuleHandleExW
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
SetCurrentDirectoryW
CreateMutexW
OpenMutexW
WritePrivateProfileStringW
GetModuleFileNameW
CloseHandle
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalFlags
InitializeCriticalSectionEx
RtlUnwind

scanner

?ResumeScan@ScannerApi@@YA_NP6AXXZP6AXAEBUSCAN_REPORT@1@@Z_N@Z
?StartScan@ScannerApi@@YA_NAEBUCARD_SETTINGS@1@P6AXXZP6AXAEBUSCAN_REPORT@1@@Z@Z
?Shutdown@ScannerApi@@YA_NXZ
?ScanNeedsResuming@ScannerApi@@YA_NAEA_N@Z
?Initialize@ScannerApi@@YA_NXZ

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
DrawThemeText
GetThemePartSize
DrawThemeParentBackground

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipGetImagePaletteSize
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipBitmapLockBits
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipBitmapUnlockBits
GdipGetImagePalette
GdipSetInterpolationMode
GdipCreateFromHDC

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

user32

DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongPtrW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
KillTimer
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
SetTimer
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowLongW
CheckDlgButton
ReleaseCapture
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
GetScrollPos
SetScrollPos
SetFocus
RealChildWindowFromPoint
GetWindow
GetClassNameW
GetDesktopWindow
PtInRect
ClientToScreen
GetWindowRect
SetWindowTextW
GetFocus
GetDlgCtrlID
CharUpperW
DestroyIcon
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
DeleteMenu
SetCursor
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongPtrW
BeginDeferWindowPos
GetWindowLongPtrW
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
SetCapture
WindowFromPoint
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
IntersectRect
InvalidateRect
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
IsMenu
DeferWindowPos
SetWindowLongPtrW

gdi32

CreateRectRgn
Escape
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectW
SetTextColor
CreateSolidBrush
SetBkColor
CreateBitmap
DeleteObject
GetDeviceCaps
DeleteDC
CopyMetaFileW
ExcludeClipRect
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
GetClipBox
GetObjectType
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateDCW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
LoadTypeLi
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
SysAllocString
SysFreeString

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 624KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f06ed7d3e615dacbff453fa34c6601e5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

scanner

advapi32

msimg32

shlwapi

uxtheme

oleacc

gdiplus

imm32

winmm

user32

gdi32

winspool.drv

shell32

ole32

oleaut32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 654KB - Virtual size: 654KB

.data Size: 28KB - Virtual size: 68KB

.pdata Size: 85KB - Virtual size: 84KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 624KB - Virtual size: 628KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 654KB - Virtual size: 654KB

.data
Size: 28KB - Virtual size: 68KB

.pdata
Size: 85KB - Virtual size: 84KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 624KB - Virtual size: 628KB